|
Posted by Maidstone on July 31, 2004, 12:07 pm
If you were Registered and logged in, you could reply and use other advanced thread options
I'm such a newbie with this and if anyone could help or direct me, I
would be ever so grateful.
I've installed the Norton Personal Firewall 2004 version. It seems to
be enabled and blocking some intrusions. But when I checked my
"statistics" it says:
Personal Firewall:
You were last attacked on: July 31,2004 8:27am
Recent Intrusion attempts: 3
Most frequent attacker: and gives the isp number.
Last night I had checked and I was attacked like 20 times.
What my question is is am I being "attacked" in the way that they are
stealing info from me. And if so how do I enable my Norton Firewall
to
STOP THIS.
I mean I have the damn thing on, I'm "blocking" popup windows saying
someone is trying to get to my computer. What else do I need to do?
Please, help. Symantec.com's "tech support" is crap.
Thank you sooooo much for any input.
xoxo,
Maidstone
|
|
Posted by Michael on July 31, 2004, 3:25 pm
If you were Registered and logged in, you could reply and use other advanced thread options
Maidstone wrote:
>I'm such a newbie with this and if anyone could help or direct me, I
>would be ever so grateful.
>
>I've installed the Norton Personal Firewall 2004 version. It seems to
>be enabled and blocking some intrusions. But when I checked my
>"statistics" it says:
>
>Personal Firewall:
>You were last attacked on: July 31,2004 8:27am
>Recent Intrusion attempts: 3
>Most frequent attacker: and gives the isp number.
>
>Last night I had checked and I was attacked like 20 times.
>
>What my question is is am I being "attacked" in the way that they are
>stealing info from me. And if so how do I enable my Norton Firewall
>to
>STOP THIS.
>
>I mean I have the damn thing on, I'm "blocking" popup windows saying
>someone is trying to get to my computer. What else do I need to do?
>
>Please, help. Symantec.com's "tech support" is crap.
>
>
That is precisely why I dumped Norton's and installed ZoneAlarm. So far
Norton's has lost 5 of my customers because they would not support me.
>Thank you sooooo much for any input.
>xoxo,
>Maidstone
>
>
Now to answer your question, you seem to be well protected, Norton
stopped 20 attacks, that is good. You need to look at the firewall log
to see what was trying to enter your PC, that will tell if it was just a
ping on your connection, or an active hacker.
The best way to find out how well you have Norton configured is to go
back to their web site and allow them to scan your communications
ports. There are two important reports to look at and they are in the
advance reports; all ports blocked, and Stealth Ports. Just because a
port is blocked does not mean a hacker will not try to enter, he will
bang away trying to find an entrance, but a Stealth Port makes the port
inviable to the hackers, if he doesn't know it exists he can't try to
get in.
Michael
|
|
Posted by \"Crash\" Dummy on July 31, 2004, 6:55 pm
If you were Registered and logged in, you could reply and use other advanced thread options >You were last attacked on: July 31,2004 8:27am
>Recent Intrusion attempts: 3
>Most frequent attacker: and gives the isp number.
>Last night I had checked and I was attacked like 20 times.
>What my question is is am I being "attacked" in the way that they are
>stealing info from me. And if so how do I enable my Norton Firewall
>to STOP THIS.
>I mean I have the damn thing on, I'm "blocking" popup windows saying
>someone is trying to get to my computer. What else do I need to do?
I will just repeat what others have said. You weren't "attacked." 3 hits or 20
hits is not an attack. It's background noise. THIS is an attack:
http://lists.gpick.com/crashsite/misc/attack.htm
What you are seeing is wrong numbers, lost packets, and random probes from
Trojans installed on infected machines. As long as they are being blocked, don't
sweat it, and ignore the misleading hyperbole from Symantec. Symantec is run by
salesman, not engineers.
I would enable logging and disable the alerts. You can study the logs at your
leisure and see what you are happily missing on the internet.
--
Dave "Crash" Dummy - A weapon of mass destruction
crash@gpick.com?subject=Techtalk (Do not alter!)
http://lists.gpick.com
|
|
Posted by optikl on July 31, 2004, 7:19 pm
If you were Registered and logged in, you could reply and use other advanced thread options
> I'm such a newbie with this and if anyone could help or direct me, I
> would be ever so grateful.
>
> I've installed the Norton Personal Firewall 2004 version. It seems to
> be enabled and blocking some intrusions. But when I checked my
> "statistics" it says:
>
> Personal Firewall:
> You were last attacked on: July 31,2004 8:27am
> Recent Intrusion attempts: 3
> Most frequent attacker: and gives the isp number.
>
> Last night I had checked and I was attacked like 20 times.
>
> What my question is is am I being "attacked" in the way that they are
> stealing info from me. And if so how do I enable my Norton Firewall
> to
> STOP THIS.
>
> I mean I have the damn thing on, I'm "blocking" popup windows saying
> someone is trying to get to my computer. What else do I need to do?
>
> Please, help. Symantec.com's "tech support" is crap.
> Thank you sooooo much for any input.
> xoxo,
> Maidstone
That "crap" about attemps is just that. The firewall is blocking port
scans from other IP addresses. They *could* be malicious attemps, but
more than likely, they are not. Just ignore those statistics. There is
nothing you can do about them, anyway. Open a cold one, sit back and
have a nice day.
|
|
Posted by Thor Kottelin on July 31, 2004, 10:41 pm
If you were Registered and logged in, you could reply and use other advanced thread options
Maidstone wrote:
> I've installed the Norton Personal Firewall 2004 version. It seems to
> be enabled and blocking some intrusions. But when I checked my
> "statistics" it says:
>
> Personal Firewall:
> You were last attacked on: July 31,2004 8:27am
> Recent Intrusion attempts: 3
> Most frequent attacker: and gives the isp number.
>
> Last night I had checked and I was attacked like 20 times.
>
> What my question is is am I being "attacked" in the way that they are
> stealing info from me.
The exact nature of those "attacks" can probably be found in your log file.
Software firewall manufacturers often refer to malware propagation attempts,
and even normal background traffic, as "attacks", presumably since it looks
more dramatic than "dropped packet" or something similar. It's obviously a
marketing gimmick.
Thor
--
http://www.anta.net/
|
| Similar Threads | Posted | | Norton Personal Firewall | July 21, 2004, 6:41 pm |
| Norton Personal Firewall | March 30, 2005, 4:24 pm |
| Norton Personal Firewall Alerts | December 16, 2004, 6:16 pm |
| Linksys router and Norton Personal Firewall | August 7, 2004, 4:05 pm |
| Norton Personal Firewall Disabled My Computer! | June 14, 2005, 8:37 pm |
| E-mail problem with Norton Personal Firewall | October 28, 2005, 4:55 pm |
| Settings for Norton Personal Firewall to allow images | March 23, 2006, 10:31 pm |
| Newbie queries Norton Internet Security 2004 automatic connection | August 1, 2004, 1:36 pm |
| Norton Personal Firewall blocks all internet traffic | April 25, 2005, 6:40 am |
| Norton personal firewall processes or registry entry | July 19, 2005, 2:17 am |
|
|
Yahoo! 
Google 
Windows Live 
del.icio.us 
digg 
Netscape 
XML site map